/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-clients.conf.xml

• browse files at revision 237.4.32
• compare with another revision
• download diff
• download tarball
• view history from revision 237.4.32

• reverse the comparison (237.4.32 to 24.1.186)
• stop comparing with revision 24.1.186

Show diffs side-by-side

added

removed

mandos-clients.conf.xml

3

3

        "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

4

4

<!ENTITY CONFNAME "mandos-clients.conf">

5

5

<!ENTITY CONFPATH "<filename>/etc/mandos/clients.conf</filename>">

6

 

<!ENTITY TIMESTAMP "2011-09-19">

 

6

<!ENTITY TIMESTAMP "2012-05-27">

7

7

<!ENTITY % common SYSTEM "common.ent">

8

8

%common;

9

9

]>

20

20

        <firstname>Björn</firstname>

21

21

        <surname>Påhlsson</surname>

22

22

        <address>

23

 

          <email>belorn@fukt.bsnet.se</email>

 

23

          <email>belorn@recompile.se</email>

24

24

        </address>

25

25

      </author>

26

26

      <author>

27

27

        <firstname>Teddy</firstname>

28

28

        <surname>Hogeborn</surname>

29

29

        <address>

30

 

          <email>teddy@fukt.bsnet.se</email>

 

30

          <email>teddy@recompile.se</email>

31

31

        </address>

32

32

      </author>

33

33

    </authorgroup>

36

36

      <year>2009</year>

37

37

      <year>2010</year>

38

38

      <year>2011</year>

 

39

      <year>2012</year>

39

40

      <holder>Teddy Hogeborn</holder>

40

41

      <holder>Björn Påhlsson</holder>

41

42

    </copyright>

65

66

      ><refentrytitle>mandos</refentrytitle>

66

67

      <manvolnum>8</manvolnum></citerefentry>, read by it at startup.

67

68

      The file needs to list all clients that should be able to use

68

 

      the service.  All clients listed will be regarded as enabled,

69

 

      even if a client was disabled in a previous run of the server.

 

69

      the service.  The settings in this file can be overridden by

 

70

      runtime changes to the server, which it saves across restarts.

 

71

      (See the section called <quote>PERSISTENT STATE</quote> in

 

72

      <citerefentry><refentrytitle>mandos</refentrytitle><manvolnum

 

73

      >8</manvolnum></citerefentry>.)  However, any <emphasis

 

74

      >changes</emphasis> to this file (including adding and removing

 

75

      clients) will, at startup, override changes done during runtime.

70

76

    </para>

71

77

    <para>

72

78

      The format starts with a <literal>[<replaceable>section

161

167

            This option is <emphasis>optional</emphasis>.

162

168

          </para>

163

169

          <para>

164

 

            This option allows you to override the default shell

165

 

            command that the server will use to check if the client is

166

 

            still up.  Any output of the command will be ignored, only

167

 

            the exit code is checked:  If the exit code of the command

168

 

            is zero, the client is considered up.  The command will be

169

 

            run using <quote><command><filename>/bin/sh</filename>

 

170

            This option overrides the default shell command that the

 

171

            server will use to check if the client is still up.  Any

 

172

            output of the command will be ignored, only the exit code

 

173

            is checked:  If the exit code of the command is zero, the

 

174

            client is considered up.  The command will be run using

 

175

            <quote><command><filename>/bin/sh</filename>

170

176

            <option>-c</option></command></quote>, so

171

177

            <varname>PATH</varname> will be searched.  The default

172

178

            value for the checker command is <quote><literal

190

196

          </para>

191

197

          <para>

192

198

            Extended timeout is an added timeout that is given once

193

 

            after a password has been sent sucessfully to a client.

 

199

            after a password has been sent successfully to a client.

194

200

            The timeout is by default longer than the normal timeout,

195

201

            and is used for handling the extra long downtime while a

196

202

            machine is booting up.  Time to take into consideration

322

328

            This option is <emphasis>optional</emphasis>.

323

329

          </para>

324

330

          <para>

325

 

            The timeout is how long the server will wait (for either a

326

 

            successful checker run or a client receiving its secret)

327

 

            until a client is disabled and not allowed to get the data

328

 

            this server holds.  By default Mandos will use 5 minutes.

 

331

            The timeout is how long the server will wait, after a

 

332

            successful checker run, until a client is disabled and not

 

333

            allowed to get the data this server holds.  By default

 

334

            Mandos will use 5 minutes.  See also the

 

335

            <option>extended_timeout</option> option.

329

336

          </para>

330

337

          <para>

331

338

            The <replaceable>TIME</replaceable> is specified as a

343

350

        </listitem>

344

351

      </varlistentry>

345

352

      

 

353

      <varlistentry>

 

354

        <term><option>enabled<literal> = </literal>{ <literal

 

355

        >1</literal> | <literal>yes</literal> | <literal>true</literal

 

356

        > | <literal >on</literal> | <literal>0</literal> | <literal

 

357

        >no</literal> | <literal>false</literal> | <literal

 

358

        >off</literal> }</option></term>

 

359

        <listitem>

 

360

          <para>

 

361

            Whether this client should be enabled by default.  The

 

362

            default is <quote>true</quote>.

 

363

          </para>

 

364

        </listitem>

 

365

      </varlistentry>

 

366

      

346

367

    </variablelist>

347

368

  </refsect1>

348

369

  

388

409

        <quote><literal>approval_duration</literal></quote>,

389

410

        <quote><literal>created</literal></quote>,

390

411

        <quote><literal>enabled</literal></quote>,

 

412

        <quote><literal>expires</literal></quote>,

391

413

        <quote><literal>fingerprint</literal></quote>,

392

414

        <quote><literal>host</literal></quote>,

393

415

        <quote><literal>interval</literal></quote>,

490

512

      <citerefentry><refentrytitle>mandos.conf</refentrytitle>

491

513

      <manvolnum>5</manvolnum></citerefentry>,

492

514

      <citerefentry><refentrytitle>mandos</refentrytitle>

 

515

      <manvolnum>8</manvolnum></citerefentry>,

 

516

      <citerefentry><refentrytitle>fping</refentrytitle>

493

517

      <manvolnum>8</manvolnum></citerefentry>

494

518

    </para>

495

519

  </refsect1>

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0